Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File:                     00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier:          RH2WXKd9UBYnnMXKmehN5cxqQ8JBJ9usd4ZV1QQEFqE=
Subject key identifier:   69:CD:68:4C:BB:47:E3:6C:B8:AD:24:62:BA:F5:B7:21:2A:EB:E9:3F
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer:       /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial:       01A0024A9A1FA3179441B9E85556972D2401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 22:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:38 +0000
Files and hashes:         1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: FsXb0XMh4Z9KNiGymzw++2vFqIL/bXWdsI3Zz7hS9ig=)
                          2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:9a:1f:a3:17:94:41:b9:e8:55:56:97:2d:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
        Validity
            Not Before: Aug 14 22:00:38 2026 GMT
            Not After : Aug 15 22:00:38 2026 GMT
        Subject: CN=69cd684cbb47e36cb8ad2462baf5b7212aebe93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:e3:04:34:f5:75:ce:9e:cd:45:43:d9:76:
                    a1:46:0b:c9:9e:48:42:aa:aa:f4:44:1f:a9:a8:3a:
                    f9:43:1a:af:b2:72:b3:ff:c8:9c:fe:77:b3:54:17:
                    dc:97:0b:02:91:01:32:45:51:8f:47:9b:ea:f0:f2:
                    b1:9c:9c:3f:da:dd:5a:30:9f:a2:e0:28:3b:cc:30:
                    e2:2a:ee:ec:95:d2:d2:46:fd:03:77:f1:09:5a:76:
                    5c:19:5c:4d:fe:92:db:4c:6d:68:98:55:74:e3:e5:
                    7e:12:a4:2d:bd:0b:2c:c8:59:ed:7f:be:b5:b8:e6:
                    2a:2d:b1:31:9b:a3:d5:96:ac:08:bc:e8:d1:5b:3f:
                    a9:62:e8:cb:1f:8d:73:88:60:03:63:7d:4e:a2:30:
                    af:ba:d6:e8:f4:8e:f9:0c:4b:ef:c1:80:9d:9f:7d:
                    9d:a6:49:57:55:ca:56:aa:f4:6b:0a:a7:9c:cb:96:
                    84:8c:14:ed:69:e8:cf:1e:33:55:87:f1:88:15:cb:
                    8b:65:74:52:10:6b:15:f3:f7:03:6c:d1:76:72:ff:
                    c3:08:1b:7e:a6:60:aa:e1:24:7d:99:35:67:ef:15:
                    bb:ce:cf:e3:5a:8d:c8:f5:6c:cf:4f:05:3e:cd:79:
                    a4:8a:73:e0:9a:29:de:87:a6:f3:9d:98:ea:ba:fe:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:68:4C:BB:47:E3:6C:B8:AD:24:62:BA:F5:B7:21:2A:EB:E9:3F
            X509v3 Authority Key Identifier:
                keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:28:53:b2:24:a3:30:d2:9d:82:ce:3d:dd:4e:44:2b:9e:ff:
         0d:c6:3d:9a:b1:40:3c:eb:ec:89:9f:a8:36:26:cb:94:14:12:
         bd:02:7a:43:67:1b:83:23:1a:93:76:a1:2e:5d:9b:12:88:c4:
         21:70:ca:a5:fb:97:58:95:bf:51:84:12:e9:29:1f:93:b8:12:
         47:1c:95:28:72:ba:c1:37:56:0b:99:f7:d1:88:23:51:da:a2:
         a8:c9:f8:cd:54:d8:52:2f:90:d1:97:00:ea:51:9f:fe:21:f6:
         61:db:a0:c2:36:44:c1:b3:73:82:79:3b:91:50:5d:89:ab:a8:
         d1:cf:d9:50:a4:37:cf:9c:00:d4:2a:75:c3:15:8c:ba:12:3d:
         32:38:d2:85:99:f6:54:57:ed:67:aa:89:9e:a7:ee:0d:63:53:
         30:8a:b2:96:1d:04:f9:07:7b:31:8f:a3:f0:e1:1a:4d:60:ce:
         56:fb:59:6e:52:60:22:87:d0:15:1b:63:73:1b:21:d9:7b:0f:
         2e:f2:30:b5:9f:27:a2:8b:b7:b6:fa:27:88:e3:8b:b4:82:95:
         6a:0b:21:e2:7b:01:db:a1:dd:94:f0:18:4e:f3:db:41:25:a9:
         b2:76:d5:7b:07:1d:fc:39:76:f3:60:97:78:cb:a6:55:c5:90:
         2a:ef:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:59 2026 by rpki-client